CVE-2010-3898

Description

IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) cookies, which might allow remote attackers to bypass authentication by leveraging access to other pages on the web site.

References

http://www.vupen.com/english/advisories/2010/2933

http://www.securityfocus.com/bid/44740

http://www.securityfocus.com/archive/1/514688/100/0/threaded

http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS